NetApp 產品多個漏洞

影響

• 阻斷服務
• 資料洩露
• 篡改

受影響之系統或技術

• AFF Baseboard Management Controller (BMC) - A700s
• Active IQ Unified Manager for VMware vSphere
• Clustered Data ONTAP
• Clustered Data ONTAP Antivirus Connector
• FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400
• FAS/AFF Baseboard Management Controller (BMC) - A250/500f
• NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H300E/H500E/H700E/H410S
• NetApp HCI Baseboard Management Controller (BMC) - H410C
• NetApp HCI Compute Node (Bootstrap OS)
• NetApp SANtricity SMI-S Provider
• NetApp SMI-S Provider
• NetApp SolidFire & HCI Management Node
• NetApp SolidFire, Enterprise SDS & HCI Storage Node (Element Software)
• SnapManager for Hyper-V

解決方案

• 有關修補程式的更新，請瀏覽供應商之網站。
  • 軟件修補程式將通過 NetApp 網站的 “下載中心” 提供。
    https://mysupport.netapp.com/site/downloads/

漏洞識別碼

• CVE-2021-4157
• CVE-2021-4197
• CVE-2022-0435
• CVE-2022-1292
• CVE-2022-1343
• CVE-2022-1434
• CVE-2022-1473
• CVE-2022-29156

資料來源

• NetApp

相關連結

• https://security.netapp.com/advisory/ntap-20220602-0001/
• https://security.netapp.com/advisory/ntap-20220602-0002/
• https://security.netapp.com/advisory/ntap-20220602-0006/
• https://security.netapp.com/advisory/ntap-20220602-0007/
• https://security.netapp.com/advisory/ntap-20220602-0009/